Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository problems

These problems occurred while renovating this repository. View logs.

• WARN: 1 upgrade(s) did not have a releaseTimestamp, but as we're running with minimumReleaseAgeBehaviour=timestamp-optional, proceeding

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• [deps]: Update Rust crate android_logger to v0.15.1
• [deps]: Update Rust crate clap to v4.5.51
• [deps]: Update Rust crate clap_complete to v4.5.60
• [deps]: Update Rust crate dylint_linting to v4.1.2
• [deps]: Update Rust crate dylint_testing to v4.1.2
• [deps]: Update Rust crate erased-serde to v0.4.8
• [deps]: Update Rust crate log to v0.4.28
• [deps]: Update Rust crate rustls to v0.23.34
• [deps]: Update Rust crate rustls-platform-verifier to v0.6.2
• [deps]: Update Rust crate serde to v1.0.228
• [deps]: Update Rust crate serde_json to v1.0.145
• [deps]: Update Rust crate tokio-util to v0.7.17
• [deps]: Update Rust crate trybuild to v1.0.113
• [deps]: Update Rust crate wiremock to v0.6.5
• [deps]: Update Rust crate zeroize to v1.8.2
• [deps]: Update typescript to v5.9.3
• [deps]: Update gh minor (Swatinem/rust-cache, actions/create-github-app-token, actions/download-artifact, actions/setup-node, actions/upload-artifact, codecov/codecov-action, crazy-max/ghaction-import-gpg, github/codeql-action, gradle/actions, ncipollo/release-action)
• 🔐 Create all pending approval PRs at once 🔐

Edited/Blocked

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• [deps]: Update clippy_utils digest to d154da9
• [deps]: Update Rust crate criterion to 0.7.0
• [deps]: Update Rust crate uniffi to v0.30.0
• [deps]: Update rust Docker tag to v1.91
• [deps]: Lock file maintenance

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• [deps]: Update Rust crate argon2 to v0.6.0-rc.2
• [deps]: Update Rust crate libloading to >=0.8.1, <0.10
• [deps]: Update Rust crate pem-rfc7468 to v1

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• [deps]: Update passkey digest to 331804e
• [deps]: Update passkey-client digest to 331804e
• [deps]: Update @openapitools/openapi-generator-cli to v2.25.0
• [deps]: Update Rust crate bat to 0.26.0
• [deps]: Update Rust crate comfy-table to v7.2.1
• [deps]: Update Rust crate coset to v0.4.0
• [deps]: Update Rust crate csv to v1.4.0
• [deps]: Update Rust crate darling to 0.21.0
• [deps]: Update Rust crate inquire to 0.9.0
• [deps]: Update Rust crate tokio to v1.48.0
• [deps]: Update Rust crate typenum to >=1.18.0, <1.20.0
• [deps]: Update Rust to v1.91.0
• [deps]: Update Rust to v2025-11-09
• [deps]: Update actions/setup-node action to v6
• [deps]: Update GitHub Artifact Actions (major) (actions/download-artifact, actions/upload-artifact)
• [deps]: Update github/codeql-action action to v4
• [deps]: Update gradle/actions action to v5
• [deps]: Update Rust crate dylint_linting to v5
• [deps]: Update Rust crate dylint_testing to v5
• [deps]: Update type-fest to v5
• Click on this checkbox to rebase all open PRs at once

Ignored or Blocked

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• [deps]: Update Rust crate getrandom to >=0.2.9, <0.4
• [deps]: Update Rust crate rand to >=0.8.5, <0.10
• [deps]: Update Rust crate rand_chacha to v0.9.0
• [deps]: Update Rust crate generic-array to v1

Detected dependencies

cargo

bitwarden_license/bitwarden-commercial-vault/Cargo.toml

bitwarden_license/bitwarden-sm/Cargo.toml

Cargo.toml

• async-trait >=0.1.80, <0.2
• chrono >=0.4.26, <0.5
• data-encoding >=2.0, <3
• ed25519-dalek >=2.1.1, <=2.2.0
• futures >=0.3.31, <0.4
• js-sys >=0.3.72, <0.4
• log >=0.4.18, <0.5
• proc-macro2 >=1.0.89, <2
• quote >=1.0.37, <2
• reqwest >=0.12.5, <0.13
• schemars >=1.0.0, <2.0
• serde >=1.0, <2.0
• serde_bytes >=0.11.17, <0.12.0
• serde_json >=1.0.96, <2.0
• serde_qs >=0.12.0, <0.16
• serde_repr >=0.1.12, <0.2
• serde-wasm-bindgen >=0.6.0, <0.7
• syn >=2.0.87, <3
• thiserror >=1.0.40, <3
• tokio 1.36.0
• tsify >=0.5.5, <0.6
• uniffi =0.29.4
• uuid >=1.3.3, <2.0
• validator >=0.18.1, <0.21
• wasm-bindgen >=0.2.105, <0.3
• wasm-bindgen-futures 0.4.55
• wasm-bindgen-test 0.3.55
• wiremock >=0.6.0, <0.7
• zxcvbn >=3.0.1, <4.0

crates/bitwarden-api-api/Cargo.toml

• mockall >=0.13.1, <0.14
• serde_with >=3.8, <4
• url >=2.5, <3

crates/bitwarden-api-identity/Cargo.toml

• mockall >=0.13.1, <0.14
• serde_with >=3.8, <4
• url >=2.5, <3

crates/bitwarden-auth/Cargo.toml

• wiremock 0.6.0

crates/bitwarden-cli/Cargo.toml

• clap 4.5.4
• color-eyre 0.6.3
• inquire 0.7.0
• supports-color 3.0.0

crates/bitwarden-collections/Cargo.toml

crates/bitwarden-core/Cargo.toml

• getrandom >=0.2.9, <0.3
• rand >=0.8.5, <0.9
• zeroize >=1.7.0, <2.0
• rand_chacha 0.3.1
• zeroize >=1.7.0, <2.0
• rustls 0.23.19
• rustls-platform-verifier 0.6.0

crates/bitwarden-crypto/Cargo.toml

• aes >=0.8.2, <0.9
• argon2 =0.6.0-rc.1
• cbc >=0.1.2, <0.2
• chacha20poly1305 0.10.1
• ciborium >=0.2.2, <0.3
• coset >=0.3.8, <0.4
• generic-array >=0.14.7, <1.0
• hkdf >=0.12.3, <0.13
• hmac >=0.12.1, <0.13
• num-bigint >=0.4, <0.5
• num-traits >=0.2.15, <0.3
• pbkdf2 >=0.12.1, <0.13
• rand >=0.8.5, <0.9
• rand_chacha >=0.3.1, <0.4.0
• rayon >=1.8.1, <2.0
• rsa >=0.9.2, <0.10
• sha1 >=0.10.5, <0.11
• sha2 >=0.10.6, <0.11
• subtle >=2.5.0, <3.0
• typenum >=1.18.0, <1.19.0
• zeroize >=1.7.0, <2.0
• zeroizing-alloc >=0.1.0, <0.2
• criterion 0.6.0
• rand_chacha 0.3.1

crates/bitwarden-encoding/Cargo.toml

• data-encoding-macro 0.1.18

crates/bitwarden-error-macro/Cargo.toml

• darling 0.20.10

crates/bitwarden-error/Cargo.toml

• trybuild 1.0.101

crates/bitwarden-exporters/Cargo.toml

• credential-exchange-format >=0.3, <0.4
• csv 1.3.0
• num-traits >=0.2, <0.3

crates/bitwarden-fido/Cargo.toml

• coset >=0.3.7, <0.4
• itertools >=0.13.0, <0.15
• p256 >=0.13.2, <0.14
• passkey 3b764633ebc6576c07bdd12ee14d8e5c87b494ed
• passkey-client 3b764633ebc6576c07bdd12ee14d8e5c87b494ed

crates/bitwarden-generators/Cargo.toml

• rand >=0.8.5, <0.9
• rand_chacha 0.3.1

crates/bitwarden-ipc/Cargo.toml

• erased-serde >=0.4.6, <0.5

crates/bitwarden-pm/Cargo.toml

crates/bitwarden-send/Cargo.toml

• zeroize >=1.7.0, <2.0

crates/bitwarden-ssh/Cargo.toml

• ed25519 >=2.2.3, <3.0
• pem-rfc7468 0.7.0
• pkcs8 >=0.10.2, <0.11
• rand >=0.8.5, <0.9
• rsa >=0.9.2, <0.10
• ssh-key >=0.6.7, <0.7
• rand_chacha 0.3.1

crates/bitwarden-state/Cargo.toml

• indexed-db >=0.4.2, <0.5
• rusqlite >=0.37.0, <0.38

crates/bitwarden-test/Cargo.toml

crates/bitwarden-threading/Cargo.toml

• tokio-util 0.7.15
• console_error_panic_hook 0.1.7
• tokio-test 0.4.4
• gloo-timers 0.3.0

crates/bitwarden-uniffi-error/Cargo.toml

• anyhow >=1.0, <2.0

crates/bitwarden-uniffi/Cargo.toml

• env_logger 0.11.1
• android_logger 0.15
• jni >=0.21, <0.22
• libloading >=0.8.1, <0.9
• rustls-platform-verifier 0.6.0
• oslog 0.2.0

crates/bitwarden-uuid-macro/Cargo.toml

crates/bitwarden-uuid/Cargo.toml

crates/bitwarden-vault/Cargo.toml

• hmac >=0.12.1, <0.13
• percent-encoding >=2.1, <3.0
• sha1 >=0.10.5, <0.11
• sha2 >=0.10.6, <0.11

crates/bitwarden-wasm-internal/Cargo.toml

• console_error_panic_hook 0.1.7
• console_log 1.0.0
• log 0.4.20
• wasm-bindgen =0.2.105
• wasm-bindgen-futures 0.4.41

crates/bw/Cargo.toml

• base64 >=0.22.1, <0.23
• bat 0.25.0
• clap 4.5.4
• clap_complete 4.5.55
• color-eyre 0.6.3
• env_logger 0.11.1
• erased-serde 0.4.6
• inquire 0.9.1
• log 0.4.20
• serde_yaml 0.9.33

crates/memory-testing/Cargo.toml

• comfy-table 7.1.1
• hex 0.4.3
• serde 1.0.196
• serde_json 1.0.113
• zeroize 1.7.0

crates/uniffi-bindgen/Cargo.toml

support/lints/Cargo.toml

• clippy_utils 334fb906aef13d20050987b13448f37391bb97a2
• dylint_linting 4.1.0
• dylint_testing 4.1.0

support/lints/error_enum/Cargo.toml

support/lints/error_suffix/Cargo.toml

• thiserror >=1.0.40, <3

dockerfile

crates/memory-testing/Dockerfile

• rust 1.89-alpine
• alpine 3.22

github-actions

.github/workflows/build-android.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• dtolnay/rust-toolchain 6d653acede28d24f02e3cd41383119e8b1b35921
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3
• actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• dtolnay/rust-toolchain 6d653acede28d24f02e3cd41383119e8b1b35921
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3
• actions/setup-java v5.0.0@dded0888837ed1f317902acf8a20df0ad188d165
• actions/download-artifact v4.1.8@fa0a91b85d4f404e444e00e005971372dc801d16
• gradle/actions v4.3.0@94baf225fe0a508e581a564467443d0e2379123b
• actions/create-github-app-token v2.1.1@a8d616148505b5069dccd32f177bb87d7f39123b

.github/workflows/build-rust-crates.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• dtolnay/rust-toolchain 6d653acede28d24f02e3cd41383119e8b1b35921
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• dtolnay/rust-toolchain 6d653acede28d24f02e3cd41383119e8b1b35921
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3

.github/workflows/build-swift.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• dtolnay/rust-toolchain 6d653acede28d24f02e3cd41383119e8b1b35921
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3
• actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08
• actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08
• actions/github-script v8.0.0@ed597411d8f924073f98dfc5c65a23a2325f34cd

.github/workflows/build-wasm-internal.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/setup-node v4.2.0@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a
• dtolnay/rust-toolchain 6d653acede28d24f02e3cd41383119e8b1b35921
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3
• actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08
• actions/github-script v8.0.0@ed597411d8f924073f98dfc5c65a23a2325f34cd

.github/workflows/check-powerset.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• dtolnay/rust-toolchain 6d653acede28d24f02e3cd41383119e8b1b35921
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3

.github/workflows/cloc.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8

.github/workflows/delete-old-packages.yml

• actions/delete-package-versions v5.0.0@e5bc658cc4c965c472efe991f8beea3981499c55

.github/workflows/direct-minimal-versions.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• dtolnay/rust-toolchain 6d653acede28d24f02e3cd41383119e8b1b35921
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3

.github/workflows/enforce-labels.yml

• yogevbd/enforce-label-action 2.2.2@a3c219da6b8fa73f6ba62b68ff09c469b3a1c024

.github/workflows/lint.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• dtolnay/rust-toolchain 6d653acede28d24f02e3cd41383119e8b1b35921
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3
• github/codeql-action v3.28.8@dd746615b3b9d728a6a37ca2045b68ca76d4841a
• actions/setup-node v4.2.0@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a

.github/workflows/memory-testing.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• dtolnay/rust-toolchain 6d653acede28d24f02e3cd41383119e8b1b35921
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3

.github/workflows/minimum-rust-version.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• dtolnay/rust-toolchain 6d653acede28d24f02e3cd41383119e8b1b35921
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3

.github/workflows/publish-rust-crates.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• dtolnay/rust-toolchain 6d653acede28d24f02e3cd41383119e8b1b35921
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3
• chrnorm/deployment-action v2.0.7@55729fcebec3d284f60f5bcabbd8376437d696b1
• chrnorm/deployment-status v2.0.3@9a72af4586197112e0491ea843682b5dc280d806
• chrnorm/deployment-status v2.0.3@9a72af4586197112e0491ea843682b5dc280d806

.github/workflows/publish-wasm-internal.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/setup-node v4.4.0@49933ea5288caeca8642d1e84afbd3f7d6820020

.github/workflows/release-rust-crates.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• ncipollo/release-action v1.15.0@cdcc88a9acf3ca41c16c37bb7d21b9ad48560d87

.github/workflows/release-swift.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/create-github-app-token v2.1.1@a8d616148505b5069dccd32f177bb87d7f39123b
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• crazy-max/ghaction-import-gpg v6.3.0@e89d40939c28e39f97cf32126055eeae86ba74ec
• actions/create-github-app-token v2.1.1@a8d616148505b5069dccd32f177bb87d7f39123b

.github/workflows/review-code.yml

.github/workflows/rust-test.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• dtolnay/rust-toolchain 6d653acede28d24f02e3cd41383119e8b1b35921
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• dtolnay/rust-toolchain 6d653acede28d24f02e3cd41383119e8b1b35921
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• dtolnay/rust-toolchain 6d653acede28d24f02e3cd41383119e8b1b35921
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3
• codecov/codecov-action v5.3.1@13ce06bfc6bbe3ecf90edbbf1bc32fe5978ca1d3

.github/workflows/rustdoc.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• dtolnay/rust-toolchain 6d653acede28d24f02e3cd41383119e8b1b35921
• actions/upload-pages-artifact v4.0.0@7b1f4a764d45c48632c6b24a0339c27f5614fb0b
• actions/deploy-pages v4.0.5@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e

.github/workflows/scan.yml

.github/workflows/update-api-bindings.yml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/create-github-app-token v2.1.1@a8d616148505b5069dccd32f177bb87d7f39123b
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3
• actions/setup-node v4.2.0@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a

.github/workflows/version-bump.yml

• dtolnay/rust-toolchain 6d653acede28d24f02e3cd41383119e8b1b35921
• Swatinem/rust-cache v2.7.7@f0deed1e0edfc6a9be95417288c0e1099b1eeec3
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• crazy-max/ghaction-import-gpg v6.2.0@cb9bde2e2525e640591a934b1fd28eef1dcaf5e5
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8

npm

crates/bitwarden-wasm-internal/bitwarden_license/npm/package.json

• type-fest ^4.41.0
• typescript 5.9.2

crates/bitwarden-wasm-internal/npm/package.json

• type-fest ^4.41.0
• typescript 5.9.2

package.json

• @openapitools/openapi-generator-cli 2.23.1
• husky 9.1.7
• lint-staged 16.2.6
• prettier 3.6.2

regex

rust-toolchain.toml

• rust 1.87.0

rust-toolchain.toml

• rust-nightly 2025-08-18

---

• Check this box to trigger a request for Renovate to run again on this repository